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Claims 

1. Apparatus for real-time data communication comprising a sending client temii- 
nal (10) and at least one receiving client terminal (20), the client terminals being 
provided with protective means (12, 22), the real-time data communication 
transmitted via an intermediate distribution server (30), the protective means (12, 
22) being provided with a network translation unit (not shown) for mapping one 
intemally accessible network destination address with a corresponding externally 
accessible network destination address, 

characterised in that 

„. the sending client terminal (10) and the intermediate distribution server 

(30) are adapted to exchange information between one another about the current 
mapping of destination addresses for the server to access the receiving client 
terminal (20) with real-time data communication. 

2. Apparatus for real-time data conmiunication according to claim 1, ciiaracterised 
in that 

the protective means is a firewall arrangement. 

3. Apparatus for real-time data communication according to claim 1 or 2, charac- 
terised in that 

the protective means is a virus shield arrangement. 

4. Apparatus for real-time data communication according to claims 1-3, charac- 
terised in that 

real-time data communication includes data from streaming video, IP- 
telephony or synchronous communication. 

5. Method for real-time data communication comprising a sending client terminal 
(10) and at least one receiving client terminal (20), the client terminals being 



wo 2004/043040 PCT/SE2003/001697 

9 

provided with protective means (12, 22), the real-time data communication 
transmitted via an intemiediate distribution server (30), the protective means (12, 
22) being provided with a network translation unit (not shown) for mapping one 
internally accessible network destination address with a corresponding extemally 
accessible network destination address, 
characterised by 

exchanging information between the sending client terminal (10) and 
the intemiediate distribution server (30) about the current mapping of destination 
addresses for the server to access the receiving client terminal (20) with real- 
time data communication. 

6. Method for real-time data communication according to claim 5, further charac- 
terised by 

exchanging a secret piece of information, such as a so-called key, be- 
tween the sending and receiving client terminals, 

the receiving client terminal transmitting requesting the sending client 
terminal to encrypt an arbitrary sequence by using the secret piece of infomia- 
tion, 

the sending and receiving client terminals encrypting the arbitrary se- 
quence by using the exchanged identical secret piece of infomiation, and 

comparing the results of the communication terminals encrypted se- 
quences so as to acknowledge further transmission of real-time data concmiuni- 
cation between the client temiinals. 

7. Method for real-time data commimication according to claim 6, further charac- 
terised by 

exchanging the secret piece of information, the so-called key, in a se- 
cure transport mode such as secure HTTP (hypertext transfer protocol) via TCP 
(transmission control protocol). 
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8. Computer program product for real-time data communication comprising a 
sending client terminal (10) and at least one receiving client terminal (20), the 
client terminals being provided witla protective means (12, 22), the real-time data 
communication transmitted via an intermediate distribution server (30), the pro- 
tective means (12, 22) being provided v^ith a network translation unit (not 
shown) for mapping one intemally accessible network destination address with a 
corresponding externally accessible network destination address, 
characterised in that 

the computer program product is adapted for carrying out the method 
steps of claim 5-7. 



